From: Harish Venkata Kajur <vk250x@att.com>
Date: Wed, 15 Jul 2020 16:07:57 +0000 (-0400)
Subject: Ensure Non-root user for haproxy
X-Git-Tag: 1.7.0~7
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=a1f2a07763cda156c149624b09c48ff85aa0d4a7;p=aai%2Faai-common.git

Ensure Non-root user for haproxy

Issue-ID: AAI-2822
Change-Id: Ic5ea276e4f344ef9e2c321069ba8b4ffeb38312f
Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
---

diff --git a/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile b/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
index 7bf9b20a..a96c3640 100644
--- a/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
+++ b/aai-common-docker/aai-haproxy-image/src/main/docker/Dockerfile
@@ -9,7 +9,11 @@ ENV https_proxy  ""
 RUN apk add --no-cache \
     ca-certificates \
     curl \
-    openssl
+    openssl \
+    shadow \
+    util-linux && \
+    groupadd haproxy -g 1000 && \
+    adduser -u 1000 -S -D -G haproxy -s /bin/bash haproxy
 
 RUN mkdir -p /etc/ssl/certs/ && mkdir -p /etc/ssl/private